CVSS: 1.2EPSS: 0%CPEs: 5EXPL: 3CVE-2002-0296 – Tarantella Enterprise 3 - Symbolic Link
https://notcve.org/view.php?id=CVE-2002-0296
The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the "spinning" temporary file. La instalación de Tarantela Enterpries 3 permite a usuarios locales sobreescribir ficheros arbitrarios mediante un ataque de enlaces simbólicos en el fichero temporal "spinning". • https://www.exploit-db.com/exploits/21290 http://archives.neohapsis.com/archives/bugtraq/2002-02/0187.html http://marc.info/?l=bugtraq&m=101467193803592&w=2 http://www.securityfocus.com/bid/4115 https://exchange.xforce.ibmcloud.com/vulnerabilities/8223 •
CVSS: 5.0EPSS: 0%CPEs: 3EXPL: 0CVE-2002-0203
https://notcve.org/view.php?id=CVE-2002-0203
ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows remote attackers to view directory contents via an empty pg parameter. ttawebpot.cgi en Tarantella Enterprise 3.20 en SPARC Solaris y Linux, y 3.1x y 3.0x incluyendo 3.11.903, permite atacantes remotos ver los contenidos del directorio mediante un parámetro pg vacío. • http://marc.info/?l=bugtraq&m=101190195430376&w=2 http://www.tarantella.com/security/bulletin-03.html •
CVSS: 5.0EPSS: 2%CPEs: 2EXPL: 2CVE-2001-0805 – Tarantella Enterprise 3 3.x - 'TTAWebTop.cgi' Arbitrary File Viewing
https://notcve.org/view.php?id=CVE-2001-0805
Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the pg parameter. • https://www.exploit-db.com/exploits/20940 http://www.securityfocus.com/archive/1/20010619150935.A5226%40tarantella.com http://www.securityfocus.com/archive/1/3B2E37D0.81D9ED9D%40snosoft.com http://www.securityfocus.com/bid/2890 https://exchange.xforce.ibmcloud.com/vulnerabilities/6723 •